CertiK recently released the CertiK Hack3D: H1 2026 Report, a data-driven analysis of Web3 security incidents from January through June 2026. Across 344 incidents, the ecosystem lost $1.3 billion, ...

The 15 biggest crypto exploits of H1 2026 revealed. See how hackers stole nearly $1B using compromised keys and cloud breaches.

CertiK's H1 2026 Hack3d report finds $1.32B lost across 344 incidents — down 47% on paper, but roughly 28% higher than H1 ...

The $292 million KelpDAO bridge exploit in April and the Humanity Protocol private key theft in June were already suspected ...

Attackers have reduced the time to develop an exploit for a known vulnerability from 125 days to a mere half a day, thanks to the use of AI-assisted development, leaving vulnerability scanners ...

LayerZero Labs has released its incident report on the KelpDAO bridge attack, saying about $292 million in rsETH was stolen after attackers poisoned RPC infrastructure used by its verification network ...

Google on Wednesday published exploit code for an unfixed vulnerability in its Chromium browser codebase that threatens millions of people using Chrome, Microsoft Edge, and virtually all other ...

LayerZero Labs just confirmed it. Roughly $292 million in rsETH was stolen from the KelpDAO bridge after attackers went after the RPC infrastructure — the layer that sits underneath the network’s ...

A zero-day exploit circulating online allows people with physical access to a Windows 11 system to bypass default BitLocker protections and gain complete access to an encrypted drive within seconds.

LayerZero, a cross-chain messaging protocol, has publicly apologized for its handling of communications following a major security incident involving Kelp DAO. In a detailed update released on its ...

Google says hackers used AI to help build a zero-day exploit targeting 2FA, raising concerns about AI-assisted hacking. Google says hackers used AI to help build a zero-day exploit, then stopped it ...

Almost 3 weeks ago, the KelpDAO bridge exploit began as a technical failure and quickly became a wider test of cross-chain security, protocol defaults, and accountability across decentralised finance.